GHSA-xp5q-5q7g-q26r

Suggest an improvement
Source
https://github.com/advisories/GHSA-xp5q-5q7g-q26r
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-xp5q-5q7g-q26r/GHSA-xp5q-5q7g-q26r.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-xp5q-5q7g-q26r
Aliases
Published
2026-05-12T18:30:41Z
Modified
2026-06-29T12:26:04Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Ludwig framework is vulnerable to insecure deserialization in its model serving component
Details

The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) in its model serving component. When starting a model server with the ludwig serve command, the framework loads model weight files using torch.load() without enabling the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the pickle module. An attacker can exploit this by providing a maliciously crafted PyTorch model file, leading to arbitrary code execution on the system hosting the Ludwig model server.

Database specific 
{
    "cwe_ids":  [
        "CWE-502"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-05-27T22:17:15Z",
    "nvd_published_at":  "2026-05-12T18:16:52Z",
    "severity":  "CRITICAL"
}
References

Affected packages

PyPI / ludwig

Package

Name
ludwig
View open source insights on deps.dev
Purl
pkg:pypi/ludwig

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
0.10.4

Affected versions

0.*
0.1.0
0.1.1
0.1.2
0.2
0.2.1
0.2.2
0.2.2.2
0.2.2.3
0.2.2.4
0.2.2.5
0.2.2.6
0.2.2.7
0.2.2.8
0.3
0.3.1
0.3.2
0.3.3
0.4rc1
0.4
0.4.1
0.5rc1
0.5rc2
0.5
0.5.1
0.5.2
0.5.3
0.5.4
0.5.5
0.6
0.6.1
0.6.2
0.6.3
0.6.4
0.7
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.8
0.8.1
0.8.1.post1
0.8.2
0.8.3
0.8.4
0.8.5
0.8.6
0.9
0.9.1
0.9.2
0.9.3
0.10.0
0.10.1
0.10.2
0.10.3
0.10.4

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-xp5q-5q7g-q26r/GHSA-xp5q-5q7g-q26r.json"